
skyhook
A round-trip obfuscated HTTP file transfer setup built to bypass IDS detections.

A round-trip obfuscated HTTP file transfer setup built to bypass IDS detections.

Generate malicious PDF test files for penetration testing, bug bounty hunting, and red teaming. Tests SSRF, XSS, XXE, NTLM credential theft, and data…

Android remote administration tool

Security toolkit for AI agents. Scan your machine for dangerous skills and MCP configs, monitor for supply chain attacks, test prompt injection…

Simple C++ Image Steganography tool to encrypt and hide files inside images using Least-Significant-Bit encoding.

Easy files and payloads delivery over DNS

DNS Exfiltration tool for stealthily sending files over DNS requests.

A python script to dump files and folders remotely from a Windows SMB share.

A listener profile for the Mythic C2 framework that utilizes AI vendors file API's

Security scanner for AI/ML model files. Detects malicious code, backdoors, and vulnerabilities before deployment

PoC for CVE-2026-85706: GitLab CE/EE unauthenticated arbitrary local file read

GC2 is a Command and Control application that allows an attacker to execute commands on the target machine using Google Sheet or Microsoft SharePoint…

Proof-of-concept and reproduction lab for CVE-2026-85706, an unauthenticated path-traversal file read in GitLab CE/EE repository commits and files…

将文件隐写进MP4/MKV文件中 (Embed files into MP4/MKV files.)

Transparent file encryption in git

Malicious PixelCode is a security research project that demonstrates a covert technique for encoding executable files into pixel data and storing…

Python PoC for CVE-2026-85706, an unauthenticated path traversal in GitLab CE/EE Repository Commits API that leaks arbitrary local files via a…

A simple utility to convert EXE files to JPEG images and vice versa.